Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec6a4160-ba41-3819-b792-defc017a5b48.roa
File: ec6a4160-ba41-3819-b792-defc017a5b48.roa (raw, json)
Hash identifier: cMr7sIZrhnJ9IB0YgQfzF3ZAQyiEQPHyalgfUUZofis=
Subject key identifier: F4:33:82:1B:3C:A4:04:B7:A6:AD:99:CD:53:AB:D9:9B:93:F8:CD:AD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0F0BE91BD9C100FC0B880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec6a4160-ba41-3819-b792-defc017a5b48.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396581
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f0:be:91:bd:9c:10:0f:c0:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=7fbd3326-595d-4168-9fd7-3cbd0bf461f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:67:e6:69:e1:eb:9a:af:ed:0b:05:09:27:
5e:6e:85:46:bf:51:5a:09:fe:83:e1:2f:76:51:8c:
27:03:84:5e:e3:bc:c5:b2:61:ee:2e:fc:65:ad:d9:
f6:2d:1f:4f:d4:a3:4b:bd:0a:ff:56:13:fe:9e:0e:
3e:0f:0c:7b:13:68:d7:27:5a:8c:a3:07:3d:76:56:
17:18:08:3e:6a:a0:06:80:66:ab:eb:6b:65:89:33:
b5:76:4e:51:45:d1:fb:33:0a:c5:7b:fa:0a:7c:d1:
cc:78:9d:5d:3b:4a:40:13:11:72:d7:b3:aa:a8:c8:
5f:b8:dd:dd:d8:ef:13:75:c7:22:f6:7c:66:22:7f:
db:6f:ce:e3:72:99:e2:2e:5d:a1:ed:d8:2e:61:c8:
41:c5:cd:64:63:78:b5:5b:94:5e:e3:79:a1:62:ab:
c2:0f:3e:27:77:3f:15:7c:3d:ea:53:05:5b:c5:81:
64:f4:7c:44:4d:fd:fe:a2:2f:22:fa:b1:e2:0b:cf:
e8:75:e2:f5:81:ba:fe:0e:09:2f:62:f6:2d:fa:3d:
d8:ba:9f:4a:f7:2e:a8:df:43:1c:15:dd:76:ac:3f:
04:6f:f6:ea:a4:43:23:77:6f:f7:e9:db:d6:a9:aa:
c4:b1:52:54:f8:51:85:a2:64:74:29:d8:74:2e:63:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:33:82:1B:3C:A4:04:B7:A6:AD:99:CD:53:AB:D9:9B:93:F8:CD:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec6a4160-ba41-3819-b792-defc017a5b48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ba:e9:2c:97:c0:8a:0d:b7:6f:9c:30:54:04:2f:8f:d0:15:
f8:bf:84:24:ff:9c:8d:64:65:1b:59:c9:5c:ca:61:88:08:11:
d4:fe:e1:c8:2c:77:b1:69:0e:a2:a7:19:a4:d7:46:d8:b9:26:
2e:f8:81:26:0c:cf:f5:78:5d:f3:32:9f:af:f9:8b:7c:4b:ee:
60:d1:65:86:84:4a:53:38:11:d1:cc:31:a4:4d:cf:a1:3e:7d:
b0:c9:e4:be:70:3a:61:51:dc:18:c8:8d:93:ad:00:c5:d9:4b:
8e:2f:a9:94:f8:e9:36:d8:db:64:44:76:0c:43:39:6d:6c:da:
1b:2f:bd:59:44:01:64:5a:d6:3a:1c:b9:de:e2:01:63:1d:bb:
71:ca:30:89:04:3c:c8:30:c7:e3:2f:0f:1f:8c:d6:8c:56:52:
f5:0d:9f:64:b3:6f:e8:63:ab:85:7c:00:80:87:85:1d:82:33:
d3:7a:81:ed:17:a7:cd:be:bb:b7:b2:fe:d9:c1:ce:1a:50:04:
a7:5f:90:12:82:27:32:2e:81:0f:94:85:17:96:40:2e:d0:05:
6b:77:ae:d0:6f:23:86:19:7b:14:47:52:d4:f9:46:ed:39:8b:
ba:f1:c5:2f:b7:d7:c6:c7:ce:3e:5d:79:64:f1:72:29:a0:a1:
eb:22:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:10:21 2025 by rpki-client